En bref
- CVE-2018-8276 est une vulnérabilité MOYENNE (CVSS 6.5) touchant Microsoft.ChakraCore.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 5.8%, plus élevée que 93.1% des vulnérabilités.
- Correctif : mettre à jour vers 1.10.1 ou plus récent.
Description
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.
NVD description
A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.
Autres vulnérabilités de Microsoft.ChakraCore
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free